full MAC check